Curl CVE-2021-22876 backport in hardknott

Curl CVE-2021-22876 backport in hardknott

[Sander Visser]

[-- Attachment #1: Type: text/plain, Size: 956 bytes --]

Hi

0002-transfer-strip-credentials-from-the-auto-referer-hea.patch does not allow building of Curl without PACKAGECONFIG "proxy"

/Regards Sander

This email message (including its attachments) is confidential and may contain privileged information and is intended solely for the use of the individual and/or entity to whom it is addressed. If you are not the intended recipient of this e-mail you may not disseminate, distribute or copy this e-mail (including its attachments), or any part thereof. If this e-mail is received in error, please notify the sender immediately by return e-mail and make sure that this e-mail (including its attachments), and all copies thereof, are immediately deleted from your system. Please further note that when you communicate with us via email or visit our website we process your personal data. See our privacy policy for more information about how we process it: https://www.volvogroup.com/en-en/privacy.html

[-- Attachment #2: Type: text/html, Size: 2681 bytes --]

Re: [OE-core] Curl CVE-2021-22876 backport in hardknott

[Anuj Mittal]

On Thu, 2021-06-24 at 06:23 +0000, Sander Visser wrote:
> Hi
>  
> 0002-transfer-strip-credentials-from-the-auto-referer-hea.patch does
> not allow building of Curl without PACKAGECONFIG “proxy”
>  

I think we need this too:

https://github.com/curl/curl/commit/2c26eeef12f0204fb85d6bf40b4e7a1e2ddcdf24.patch

I will send a patch and include this in my next queue.

Thanks,

Anuj